Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/4424ef-68aa-4b70-b2cc-0873e3994d0e/1/a6so-XC3X0bCh685yxJgny87VWc.roa
File: a6so-XC3X0bCh685yxJgny87VWc.roa (raw, json)
Hash identifier: cWmqt+zpd4/MbblmLi/xUZ5yTtbn8JegG9g8fg7GF2w=
Subject key identifier: 6B:AB:28:F9:70:B7:5F:46:C2:87:AF:39:CB:12:60:9F:2F:3B:55:67
Certificate issuer: /CN=ff7d8a79bad4f983d0c49895af50ea8a03ebc70d
Certificate serial: 01987EE1E0D51AD398A8F417B77409BA6ACF
Authority key identifier: FF:7D:8A:79:BA:D4:F9:83:D0:C4:98:95:AF:50:EA:8A:03:EB:C7:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_32KebrU-YPQxJiVr1DqigPrxw0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/4424ef-68aa-4b70-b2cc-0873e3994d0e/1/a6so-XC3X0bCh685yxJgny87VWc.roa
Signing time: Wed 06 Aug 2025 10:16:28 +0000
ROA not before: Wed 06 Aug 2025 10:16:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43641
IP address blocks: 31.42.176.0/23 maxlen: 24
37.16.75.0/24 maxlen: 24
91.202.4.0/23 maxlen: 24
91.239.76.0/24 maxlen: 24
213.111.144.0/23 maxlen: 24
213.111.146.0/24 maxlen: 24
213.111.147.0/24 maxlen: 24
213.111.151.0/24 maxlen: 24
213.111.154.0/23 maxlen: 24
2a11:6100::/32 maxlen: 32
2a11:6101::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/4424ef-68aa-4b70-b2cc-0873e3994d0e/1/_32KebrU-YPQxJiVr1DqigPrxw0.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/4424ef-68aa-4b70-b2cc-0873e3994d0e/1/_32KebrU-YPQxJiVr1DqigPrxw0.mft
rsync://rpki.ripe.net/repository/DEFAULT/_32KebrU-YPQxJiVr1DqigPrxw0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 19:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7e:e1:e0:d5:1a:d3:98:a8:f4:17:b7:74:09:ba:6a:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff7d8a79bad4f983d0c49895af50ea8a03ebc70d
Validity
Not Before: Aug 6 10:16:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6bab28f970b75f46c287af39cb12609f2f3b5567
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:e1:a7:0b:c1:2b:90:10:b4:84:97:18:87:12:
3e:91:b4:e4:2f:ca:aa:3e:00:f8:7b:72:d3:8e:c1:
f9:bc:77:8e:2a:4d:3e:2a:d2:37:00:1e:3c:48:4d:
59:f4:21:16:8a:57:af:09:c0:20:27:fa:7f:eb:d3:
8c:b8:d2:81:8f:dd:2c:22:91:1a:52:14:78:d5:50:
d7:08:85:6c:fd:c0:5f:15:19:a4:b4:ba:60:3d:61:
ac:2c:27:8f:ca:f0:54:98:56:15:53:15:5b:9a:e2:
00:09:8e:08:95:b5:b2:23:da:71:71:ff:01:3a:7c:
67:91:d8:16:e9:7e:fa:4b:79:99:40:4d:13:4d:82:
0c:ba:24:d6:8f:0a:de:82:b9:0a:d0:13:f3:d9:0b:
e7:fe:11:3c:40:da:d8:4d:b8:99:a5:d3:d7:d6:92:
7d:4c:78:dd:a7:ce:53:bc:6f:06:45:fd:e6:71:87:
ba:71:92:bc:b2:a6:f3:58:66:e7:d4:dd:8c:b8:8f:
8d:51:67:b0:6d:17:f0:19:0b:aa:4c:f4:06:0e:16:
97:16:e6:94:8e:ee:84:4d:db:b2:b2:f9:f7:ec:e1:
e7:55:da:b2:1e:6e:67:97:d2:e6:3f:87:a3:72:7e:
80:f5:85:f9:ca:39:04:b7:e1:63:d5:ae:22:d6:44:
30:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:AB:28:F9:70:B7:5F:46:C2:87:AF:39:CB:12:60:9F:2F:3B:55:67
X509v3 Authority Key Identifier:
keyid:FF:7D:8A:79:BA:D4:F9:83:D0:C4:98:95:AF:50:EA:8A:03:EB:C7:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_32KebrU-YPQxJiVr1DqigPrxw0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/4424ef-68aa-4b70-b2cc-0873e3994d0e/1/a6so-XC3X0bCh685yxJgny87VWc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/4424ef-68aa-4b70-b2cc-0873e3994d0e/1/_32KebrU-YPQxJiVr1DqigPrxw0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.42.176.0/23
37.16.75.0/24
91.202.4.0/23
91.239.76.0/24
213.111.144.0/22
213.111.151.0/24
213.111.154.0/23
IPv6:
2a11:6100::/31
Signature Algorithm: sha256WithRSAEncryption
8a:97:e9:fd:23:de:88:37:79:a3:c6:df:45:08:c4:21:5e:cb:
d8:d3:0c:3d:e5:75:85:b9:17:f1:00:66:5d:03:a9:59:c5:51:
fd:4e:46:5c:ae:2b:03:2f:cb:37:b2:6c:03:45:1d:b8:2b:f2:
3f:f5:ab:3f:00:30:63:e2:e4:4d:9e:63:fe:72:63:f4:41:5e:
ec:60:50:60:d0:77:98:a3:21:c7:43:ad:d2:47:7d:d7:e8:fb:
14:11:41:dc:e7:bd:37:69:54:9e:f0:0c:9e:87:50:61:9a:31:
c7:65:96:0b:1c:75:44:5b:3a:4b:e6:09:f3:88:1f:6f:10:c6:
b9:81:d9:7f:4f:0a:37:00:22:2c:aa:0b:66:b4:79:7e:47:35:
6a:7b:25:a9:12:b3:52:b8:1e:96:cc:ae:52:28:22:f2:98:f0:
ae:c7:8e:75:e7:7d:e4:2c:89:0d:82:84:cf:96:c3:5d:9b:fc:
b3:9a:ae:30:3f:a6:88:57:02:e9:12:08:e1:62:27:03:80:8d:
4d:2b:3f:8c:07:31:42:3b:1d:c7:74:c7:f0:36:c7:ca:38:15:
9d:58:66:24:f8:92:20:f0:ba:da:57:f1:90:8b:a1:df:03:c4:
5f:4d:5e:99:b2:bf:97:8c:0a:d2:95:d7:06:de:1e:a1:5d:84:
3a:be:1f:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 04:59:50 2025 by rpki-client